Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/dLPC1zwWLR6c-HAxsvctpWkqhUY.roa
File: dLPC1zwWLR6c-HAxsvctpWkqhUY.roa (raw, json)
Hash identifier: Rgszhw7hcHHD6mI1AAbpFhxgp320JcpxfJ6ZKfl8BTk=
Subject key identifier: 74:B3:C2:D7:3C:16:2D:1E:9C:F8:70:31:B2:F7:2D:A5:69:2A:85:46
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 018DFA97CC32AD0BBA0DBA15EDDA5C0CE0F5
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/dLPC1zwWLR6c-HAxsvctpWkqhUY.roa
Signing time: Fri 01 Mar 2024 15:17:48 +0000
ROA not before: Fri 01 Mar 2024 15:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206924
IP address blocks: 91.198.241.0/24 maxlen: 24
185.230.223.0/24 maxlen: 24
2a0c:2f05:3512::/48 maxlen: 48
2a0c:2f07:d::/48 maxlen: 48
2a0c:2f07:f::/48 maxlen: 48
2a0c:2f07:29::/48 maxlen: 48
2a0c:2f07:384::/48 maxlen: 48
2a0c:2f07:ac1::/48 maxlen: 48
2a0c:2f07:4663::/48 maxlen: 48
2a0c:2f07:4896::/48 maxlen: 48
2a0c:2f07:9459::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Mar 2024 17:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:97:cc:32:ad:0b:ba:0d:ba:15:ed:da:5c:0c:e0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Mar 1 15:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74b3c2d73c162d1e9cf87031b2f72da5692a8546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:ca:ba:30:8c:69:20:92:ce:51:c9:67:78:
74:be:d6:36:d0:2e:b0:59:49:2b:44:42:4f:c9:97:
5b:5a:bc:d9:fb:98:6c:5a:19:08:c1:82:78:66:99:
38:b6:f9:ff:e0:04:f8:8e:b9:5f:43:6d:b2:c2:b1:
05:11:11:2f:ca:df:0f:6b:04:6a:8d:f7:fb:e9:61:
d2:e4:89:1b:01:72:26:a4:94:06:33:f0:16:07:b6:
93:a4:f0:c0:5e:6b:cc:9d:4f:37:a9:59:33:10:df:
87:a6:bc:13:22:11:35:d0:71:06:5a:19:ef:ca:07:
83:47:a3:93:48:4d:69:d5:bf:68:f2:37:c7:e6:ee:
f2:fc:6a:c8:9e:1f:26:d9:30:c5:00:86:03:2a:a3:
69:6b:b0:35:8c:71:20:e8:48:09:1d:0c:3e:a6:03:
c5:f8:f1:3e:30:ea:f2:77:81:40:c1:31:a5:8c:00:
00:79:c2:85:9e:76:eb:c0:77:f6:a7:b4:48:9a:76:
0e:83:8f:e5:2c:29:d2:2d:23:e4:63:e9:87:36:65:
cc:23:29:20:c6:d7:2b:62:19:26:ab:69:da:01:7f:
53:bd:4a:b7:8f:85:cd:a9:6c:9b:ac:ec:b9:b5:c9:
89:ad:a6:b9:31:54:43:a9:0d:76:1c:82:3d:75:d5:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B3:C2:D7:3C:16:2D:1E:9C:F8:70:31:B2:F7:2D:A5:69:2A:85:46
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/dLPC1zwWLR6c-HAxsvctpWkqhUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.241.0/24
185.230.223.0/24
IPv6:
2a0c:2f05:3512::/48
2a0c:2f07:d::/48
2a0c:2f07:f::/48
2a0c:2f07:29::/48
2a0c:2f07:384::/48
2a0c:2f07:ac1::/48
2a0c:2f07:4663::/48
2a0c:2f07:4896::/48
2a0c:2f07:9459::/48
Signature Algorithm: sha256WithRSAEncryption
ad:f8:72:68:c1:2d:db:f0:56:81:86:0b:b7:c2:09:5d:e4:45:
01:57:d1:ae:78:ab:d9:46:14:d0:f8:e3:ff:a5:1e:ed:45:04:
e1:09:3c:fa:3e:e9:28:e0:0d:9f:36:48:c5:ef:ce:f1:0a:2a:
c3:f2:f7:b2:7c:7a:6e:7f:2e:9c:44:8e:05:45:ea:e5:ac:e7:
1a:67:47:55:8e:76:79:6d:1f:f9:2d:33:37:df:5a:01:6d:1a:
e3:a1:87:ec:7a:9d:57:79:dd:c1:ce:19:5b:55:5c:84:b4:02:
f9:39:ca:b3:35:c5:f1:41:98:03:8f:21:fa:29:27:5f:a4:ed:
44:6b:17:72:b1:f3:c0:a3:5c:12:e1:2a:29:b1:1b:7d:a9:3b:
a2:d7:16:2c:55:c9:a4:20:08:ec:ca:94:69:72:1a:7c:37:9d:
23:01:ec:a9:0c:f2:67:f9:28:1d:60:24:06:f5:eb:5d:4a:b7:
6a:0e:27:2e:a2:9e:eb:a1:c3:be:cc:c2:27:41:2e:e1:7f:c8:
44:43:8b:99:d9:ed:51:74:91:b0:75:fd:38:12:7b:e4:b1:a1:
d4:b3:be:c7:74:9a:9b:d9:b6:a2:49:63:a6:fa:de:51:10:40:
8e:66:c9:af:08:71:f0:e4:df:88:97:7c:38:aa:33:79:32:b9:
4b:6a:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:50 2024 by rpki-client on console-fra.rpki-client.org